Ransomware-as-a-Service operation appears to be making a killing, with proceeds flowing to the gang behind the malware as well as affiliates. Sodinokibi, aka REvil and Sodin, has lately seized the RaaS mantle from GandCrab, after the administrators of that criminal scheme announced their retirement on May 31, boasting that their affiliates had earned more than $2 billion. McAfee says victims are advised to pay their ransom via an exchange; Coinbase.com is commonly used.”]
Source: https://www.careersinfosecurity.com/sodinokibi-ransomware-gang-appears-to-be-making-killing-a-13269